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RCS  REDUCTION  RE-ENTRY  VEHICLE  CCS-IFT 
SEPARATION  AND  ATTITUDE  CONTROL  SUBSYSTEM 
RELIABILITY  ANALYSIS  AND  PREDICTION 


I.  INTRODUCTION 

This  report  presents  the  preliminary  reliability  analysis  and  prediction 
suamiary  for  the  Radar  Cross  Section  Reduction  Re-Entry  Vehicle  CCS-IFT 
(REX-3).  The  reliability  analysis  and  prediction  was  performed  on  the 
Separation  and  Attitude  Control  Subsystem  as  presently  defined.  It  is 
anticipated  that  some  changes  will  be  made  prior  to  the  official  release 
of  the  drawings  for  fabrication. 

The  reliability  analysis  for  the  structure  of  the  re-entry  vehicle  has  not 
started  because  of  the  lack  of  placement  error  information  and  delays  in 
structures  design  definition.  This  analysis  will  be  contained  in  a  subse¬ 
quent  report  which  will  be  prepared  for  the  quarterly  period  ending  June, 
1963. 

The  major  difference  between  this  second  generation  vehicle  and  CS-IFT 
(REX-1)  is  that  the  CCS-IFT  (REX-3)  vehicle  does  not  Incorporate  an  Instru 
mentation  Subsystem.  Also,  the  Separation  and  Attitude  Control  Subsystem 
in  CCS-IFT  is  somewhat  simplified  and  uses  a  re-chargeable  battery. 


II.  OB..IKCTIV 

The  objective  of  the  Product  Assurance  Program  is  to  provide  a  reliability 
analysis  of  the  CCS-IFT  re-entry  vehicle  in  order  to  determine  its  capa¬ 
bility  in  performing  the  required  flight  mission.  The  desired  reliability 
goal  for  the  Separation  and  Attitude  Control  Subsystem,  as  stated  in  the 
program  plan,  is  as  follows: 

Separation  and  Attitude 
Control  Subsystem 

J  r I .  CONCLUSION 

It  is  concluded  from  the  results  of  this  analysis  and  evaluation  that  the 
following  nuircrical  reliability  prediction  for  the  subsystem  can  be  stated 

Separation  and  Attitude  R  :  0.9712 

Control  Subsystem 


!  V .  UTSCU.SSION 

A  .  General  Assumptions 

The  predicted  reliability  of  the  control  subsystem  for  the  CCS-lFT 
vehicle  is  based  on  the  following  general  assumptions: 


^A  -■  0-905 
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1.  That  a  complete  functional  checkout  and  appropriate  Inspection 
Is  made  prior  to  Installation  on  the  booster  and  that  all  re¬ 
entry  vehicle  subsystems  are  In  a  "go"  condition  prior  to  lift¬ 
off. 

2.  That  Aerospace  Ground  Equipment  (AGE)  reliability  Is  1007.  and 
will  cause  no  secondary  failures  within  the  re-entry  vehicle. 

3.  That  the  booster  Is  1007.  reliable  In  providing  the  necessary 
signals,  Initial  trajectory  orientation,  and  telemetry  where 
these  are  required. 

B.  General  Plan 


The  plan  that  was  followed  to  establish  the  stated  numerical  relia¬ 
bility  prediction  is  contained  in  Section  V  and  the  Appendices  of 

this  report.  In  general,  this  plan  has  the  following  format: 

1.  Define  control  subsystem  function. 

2.  Prepare  the  system  Reliability  Functional  Diagram  -  A  worded 
diagram  which  Illustrates  component  function  and  component 
critical  mode  of  failure. 

J.  Prepare  Component  Application  Sheets  -  Determining  if  the  appli 
cation  of  the  component  is  within  its  electrical  and  environ¬ 
mental  design  specifications. 

4.  Establish  the  Reliability  Block  Diagram. 

5.  Contact  manufacturers  of  control  subsystem  components  for  relia 
bllity  and  qualification  test  data. 

6.  Establish  component  reliability  using  manufacturer's  test  data 
or  the  RADC  Reliability  Notebook. 

7.  Establish  Reliability  Evaluation  Sheets. 

8.  Compute  the  estimated  reliability. 


V.  RELIABILITY  ANALYSIS  AND  PREDICTION 


A.  Analysis 

In  order  to  predict  reliability,  it  is  first  necessary  to  perform  a 
reliability  analysis.  The  procedure  used  In  the  reliability  analysl 
for  the  Separation  and  Attitude  Control  Subsystem  is  detailed  as 
follows: 

.  Define  the  system  or  equipment  in  terms  of  function. 

.  Define  system  components  in  terms  of  required  function  and 

modes  of  failure  which  can  cause  system  failure. 
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.  Determine  if  the  applieetlon  of  the  component  le  within  Its 
electrical  and  environmental  design  specifications. 

.  Determine  the  operating  period  during  which  system  coisponents 
are  expected  to  function  successfully. 

1.  Functional  Description 

During  the  flight  of  the  CCS-IFT  vehicle,  the  state  of  the  Separa¬ 
tion  and  Attitude  Control  Subsystem  can  be  separated  Into  three 
modes.  These  modes  are  as  follows: 

Mode  1  -  Lift-off  to  Separation  Signal  (The  control  subsystem 

Is  under  battery  power;  however.  It  performs  no  func¬ 
tion.) 

Mode  2  -  Separation  Signal  through  Vehicle  Spin  (The  control 

subsystem  performs  the  separation  function  of  firing 
the  explosive  nuts  and  the  attitude  orientation  func¬ 
tion  of  pitch,  de-pltch,  and  spin.) 

Mode  3  -  Vehicle  Spin  to  Impact  (The  control  subsystem  Is  In¬ 

active  and  performs  no  function.) 

Prior  to  lift-off,  the  vehicle  Is  enabled  by  a  signal  originating 
from  Aerospace  Ground  Equipment  (AGE).  This  signal,  which  con¬ 
sists  of  a  negative  pulse,  actuates  two  latching  type  relays  lo¬ 
cated  In  the  vehicle.  These  two  relays  start  the  following  series 
of  events: 

.  Battery  Is  connected  to  system  bus. 

.  Regulated  voltage  Is  applied  to  timer  oscillator. 

.  Timer  Is  zeroed. 

When  the  timer  Is  zeroed,  a  signal  Is  fed  back  to  AGE  where  It 
indicates  that  the  vehicle  Is  In  a  ready  state. 

During  this  period  of  enabling  the  vehicle,  a  constant  monitoring 
of  the  control  subsystem  Is  maintained  by  AGE.  The  monitor  checks 
the  following  portions  of  Che  control  subsystem: 

.  Battery  Voltage 

.  Voltage  Regulator  Output 

.  Separation  Squib  Circuits 

.  Fitch  Squib  Circuits 

.  De-Pitch  Squib  Circuits 
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.  Spin  Squib  Circuits 

.  Timer  Clamped  Output 

The  monitor  is  of  the  "go,  no-go"  type  which  only  indicates  that 
failure  has  occured  and  gives  no  indication  of  what  has  failed. 

If  the  monitor  Indicates  a  failure,  the  AGE  will  automatically 
disable  the  vehicle. 

Since  lift-off  will  not  occur  if  the  monitor  Indicates  a  failure, 
the  reliability  of  the  control  subsystem  is  considered  only  from 
lift-off  through  vehicle  spin.  However,  any  portion  of  the  moni¬ 
tor  circuit  that  could  cause  a  failure  to  the  control  subsystem 
during  flight  is  Included  in  the  reliability  prediction. 

If  the  monitor  indicates  a  "go"  condition  and  if  the  vehicle  in¬ 
dicates  it  is  enabled,  then  the  control  subsystem  is  ready  for 
lift-off.  After  lift-off,  the  control  subsystem  does  not  perform 
any  function  until  it  receives  a  separation  signal  from  the 
booster.  Upon  receiving  this  signal,  a  relay  is  activated  which 
starts  the  series  of  events  which  fires  the  explosive  nuts  to 
separate  the  vehicle  from  the  spacer.  The  control  subsystem  timer 
starts  when  the  electrical  connector  between  spacer  and  vehicle 
has  physically  separated. 

To  obtain  the  correct  attitude  orientation  for  re-entry,  the  timer 
delivers  output  signals  at  a  prescribed  time  to  fire  the  pitch,  de¬ 
pitch  and  spin  rockets.  After  the  timer  has  completed  its  attitude 
control  cycle,  it  delivers  a  fourth  signal  which  de-activates  the 
control  subsystem  by  disconnecting  the  battery  from  the  subsystem 
bus.  De-activating  the  control  subsystem  after  attitude  orienta¬ 
tion  is  complete  is  not  a  factor  of  control  subsystem  success,  but 
it  is  a  possible  factor  of  control  system  failure  if  it  occurs 
prematurely;  therefore,  this  function  is  included  in  the  reliabil¬ 
ity  of  the  control  subsystem. 

2.  Component  Function  and  Modes  of  Failure 

A  review  of  system  schematics  established  the  function  a  coiiq>onent 
is  required  to  perform  for  mission  success,  and  a  failure  mode 
was  established  by  non-performance  of  the  required  function.  The 
types  of  failure  modes  for  components  used  in  the  control  sub¬ 
system  are  defined  as  follows: 

.  Resistors,  diodes,  and  transistors  -  open,  short,  and  drift 

.  Relays  -  Coil  open  or  shorted,  failure  of  contact  sets  to 

open  and  stay  open  or  close  and  stay  closed. 

.  Battery,  timer,  rockets,  and  explosive  nuts  -  Failure  to 
deliver  their  required  outputs  when  supplied  their  re¬ 
quired  Inputs. 
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The  results  of  this  functional  and  failure  mode  evaluation  for 
the  Separation  and  Attitude  Control  Subsystem  are  shown  as 
Figure  1  and  Figure  2.  These  diagrams  are  called  Reliability 
Functional  Diagrams  and  serve  the  purpose  of  providing  (1)  system 
functions  which  are  necessary  for  mission  success;  (2)  failure 
modes  of  components  which  can  cause  system  failure;  and  (3) 
system  arrangement  for  reliability  calculations  (l.e.,  parallel 
and  series). 

Figure  1  depicts  the  Enabling  and  Monitor  circuits.  The  Monitor 
Is  Included  with  Enabling  functional  diagram  to  Illustrate  Its 
function  prior  to  lift-off.  Since  the  Monitor  Is  not  considered 
In  the  reliability  analysis  for  mission  success.  Its  reliability 
analysis  Is  considered  separately  and  Is  contained  In  Appendix  C. 

Figure  2  depicts  the  Separation  and  Attitude  Control  Subsystem 
for  Mode  2. 

The  Reliability  Functional  Diagram  distinguishes  pure  functional 
information  from  reliability  information  by  the  use  of  different 
symbols.  In  the  functional  diagram,  it  was  necessary  to  depict 
one  component  or  piece  of  equipment  in  several  places;  therefore, 
it  became  necessary  to  illustrate  Just  where  in  the  diagram  the 
reliability  of  the  component  should  be  considered.  This  was 
accomplished  through  the  use  of  appropriate  symbols.  The  defini¬ 
tion  of  these  symbols  and  terms  used  in  the  Reliability  Functional 
Diagram  are  given  in  Figure  3. 

3.  Component  Application 

Component  Application  Sheets  were  used  to  determine  that  the 
application  of  a  component  was  within  its  electrical  and  environ¬ 
mental  specifications.  The  application  sheet  compares  component 
stress  as  determined  by  Its  electrical  and  environmental  applica¬ 
tion  with  allowable  component  stress  as  specified  by  the  manu¬ 
facturer.  Electrical  stresses  were  determined  from  a  circuit 
analysis  and  environmental  stresses  were  determined  from  the  En¬ 
vironmental  Profile  as  shown  in  Figure  4.  Hence,  any  component 
stressed  beyond  its  designed  capability,  which  would  In  turn 
effect  its  reliability.  Is  detected  and  corrected.  Examples  of 
Component  Application  Sheets  for  a  resistor,  diode,  and  relay  are 
shown  in  Appendix  D. 

4.  Component  Operating  Period 

The  operating  period  during  which  a  component  is  expected  to  func¬ 
tion  successfully  is  determined  by  its  actual  operating  period 
during  Modes  1  and  2.  If  a  component  is  functioning  from  lift¬ 
off  to  vehicle  spin  (e.g.,  the  timer),  its  operating  period  will 
be  the  total  time  of  Modes  1  and  2.  If  a  component  only  functions 
for  a  short  duration  of  Modes  1  and  2  (e.g.,  the  rockets),  its 
operating  period  will  be  the  time  to  complete  its  function. 
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INPUT  (INITIAL)  BLOCK 

Depict  initiating  signal  or  action. 


DIRECT  ACTION  BLOCK 


Depicts  component  operation,  the  reliability  of 
which  is  considered  at  that  point  in  the  sequence. 


FUNCTIONAL  BLOCK 

Depicts  a  functional  description,  no  reliability 
number  associated.  This  function  is  the  result 
of  other  action  blocks  already  shown. 


INDIRECT  ACTION  BLOCK 

Depicts  component  operation,  the  reliability  of 
which  is  considered  elsewhere  in  the  sequence. 


OUTPUT  (TERMINAL)  BLOCK 
Depicts  terminal  signal  or  action. 


DEFINITIONS 


Relay  performs  without  failure,  including  the  closing 
and  opening  of  required  contact  sets.  Relay  coil  is 
not  opened  or  shorted,  closed  contacts  sets  pass 
necessary  current  and  open  contact  sets  break  necessary 
circuits. 

Designate  redundant  circuits  (Parallel  reliability). 
Designate  series  reliability  circuits. 


SYMBOLS  AND  TERMS  USED  IN 
RELIABILITY  FUNCTIONAL  DIAGRAMS 

FIGURE  3 
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PReLIHINAAY 

ENV1R0NM€NTAL  PROffte  CCS^tFT 
ON  BOARO  COMPONENTS 
FICURE  ^ 


In  the  ceae  of  relays,  a  more  useful  computing  method  Is  use  of 
the  nuinber  of  cycles  to  failure  Instead  of  time  to  failure.  Most 
relay  manufacturers  supply  life  test  Information  on  cycles  of 
operation  and  failures'.  This  Information  can  be  used  to  determine 
the  expected  reliability  of  the  component  In  Its  application. 
During  Modes  1  and  2,  all  relays  are  only  required  to  operate  for 
1  cycle. 

B.  Prediction 


1.  Reliability  Block  Diagram 

The  Reliability  Block  Diagram  for  the  Separation  and  Attitude  Con¬ 
trol  Subsystem,  Figure  5,  Is  derived  directly  from  the  Reliability 
Functional  Diagram.  Components  In  the  block  diagram  are  no  longer 
shovn  In  their  functional  sequence,  but  are  shown  In  their  series 
or  redundant  reliability  sequence  together  with  their  assigned  or 
calculated  reliability  numbers. 

2.  Prediction  Techniques 

In  predicting  reliability  for  a  component,  the  availability  of 
reliability  test  data  is  limited  to  testing  conducted  by  the  con¬ 
tractor  or  testing  conducted  by  the  manufacturer  of  the  component. 
Since  few  reliability  tests  are  being  conducted  by  Chrysler  Missile 
Division  within  the  scope  of  this  product  assurance  program,  then 
the  major  portion  of  the  reliability  test  data  la  limited  to  that 
furnished  by  the  manufacturer.  For  this  reason,  the  manufacturers 
of  components  used  In  the  design  of  the  Separation  and  Attitude 
Control  Subsystem  were  contacted  and  were  requested  to  make  avail¬ 
able,  for  our  evaluation,  reliability  and  qualification  test  data 
which  they  may  have  collected. 

In  determining  the  manufacturers  of  components,  it  was  found  that 
the  manufacturers  of  a  few  Mil  Spec  resistors  could  not  be  Iden¬ 
tified  since  they  were  ordered  through  an  electronic  supply  house 
to  a  Mil  Spec  for  which  there  are  many  qualified  manufacturers 
on  the  Qualified  Products  List  (QPL) . 

If  the  manufacturer  could  not  supply  reliability  Information  or 
If  the  manufacturer  was  not  known,  then  best  engineering  Judge¬ 
ment  and  military  documents  were  used  in  predicting  reliability. 

The  Rome  Air  Development  Center  (it\DC)  Reliability  Notebook  was 
considered  to  have  the  latest  failure  rate  Information  based  on 
engineering  approximations  of  reliability  characteristics  for 
parts  when  employed  within  their  specified  ratings.  Therefore, 
whenever  there  was  Insufficient  test  data  to  determine  reliability 
for  parts  used  In  the  Separation  and  Attitude  Control  Subsystem, 
the  RADC  Reliability  Notebook  was  used  to  predict  reliability. 
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To  Improve  the  predicted  reliability  or  failure  rate  of  a  compo¬ 
nent,  It  la  dealrable  to  conalder  only  the  portion  of  the  total 
reliability  or  failure  rate  that  la  associated  with  a  critical 
failure  mode;  however,  this  Is  only  possible  when  there  Is  suffi¬ 
cient  data  available  to  appropriately  assign  a  reliability  nuisber 
or  failure  rate  to  a  particular  failure  isode.  Since  this  type  of 
test  data  Is  limited  and  since  approximation  techniques  are  ques¬ 
tionable,  proportioning  of  reliability  and  failure  rates  to  failure 
modes  was  not  done  for  this  reliability  prediction. 

The  computation  of  reliability  and  failure  rates  for  components 
used  In  the  Separation  and  Attitude  Control  Subsystem  Is  contained 
In  Appendix  A.  For  convenience,  control  subsystem  conq>onents  are 
tabulated  on  Reliability  Evaluation  Sheets  contained  In  Appendix 
B.  These  evaluation  sheets  are  a  compilation  of  essential  data 
of  the  reliability  analysis  and  Indicates  predicted  component  re¬ 
liability  together  with  Its  source. 
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APPENDIX  A 


COMPUTATION  OF  CCagQNENT  RELIABILITY  AND  FAILURE  RATES 


DIODES 


There  are  two  typea  of  diodes  used  In  the  Separation  and  Attitude  Control  Sub¬ 
system.  These  are  a  general  purpose  type  diode,  PS510B,  manufactured  by  Pacific 
Semiconductor,  Incorporated  (PSI)  and  a  zener  diode,  Svil20B,  manufactured  by 
Tranaltron  Electronic  Corporation.  Both  of  the  diodes  are  manufactured  In  accord¬ 
ance  with  Mlnuteman  specifications.  PSI  has  operationally  life  tested  6,060 
PS510  diodes  for  1,000  hours  with  zero  failures.  PSI  uses  an  acceleration  factor 
of  100  and  computes  the  failure  rate  (\)  of  the  FSSIO  to  be  X  ®  0.00114%/1000 
hours  at  90%  confidence.  The  reliability  of  the  diodes  Is  then  computed  by  - 


R 


(1) 


Vvhcvc ; 


R  s  Reliability 

X  ■  Failure  rate  (In  failures /hour) 


"t,  ■  Operational  time  (In  hours) 

The  zener  diode,  SV1120B,  has  a  failure  rate  which  Is  taken  from  Mlnuteman  standard 
parts  books.  This  failure  rate  Is  based  only  on  Junction  temperature  (Tj)-  The 
for  this  part  can  be  computed  from  the  following  formula: 


T 


J 


(2) 


Junction  temperature 

thermal  resistance  from  Junction  to  free  air 
ambient  temperature 

average  power  dissipated  at  the  Junction  at 
temperature  Tj 

For  the  SV1120B,  Ta  is  37°C;  Is  0. 25°C/mllliwatt  and  is  290  milliwatts 

maximum.  Solving  equation  (2)  for  Tj  ,  it  is  found  that  Tj  is  99.50C.  From 
graphs  In  the  Mlnuteman  standard  parts  book,  the  failure  rate  Is  shown  to  be 
0.JJ7,/1000  hours,  computed  by  using  equation  (1).  Additional  Information  on  the 
reliability  of  the  SV1120B  has  been  requested  from  Transltron. 


Where:  f . 


RELAYS 


There  are  four  types  of  relays  manufactured  by  three  different  manufacturers 
used  In  the  Separation  and  Attitude  Control  Subsystem.  These  relays  are  manu¬ 
factured  by  Potter  and  Brumfield,  P/N  SLG-ll-DA;  Babcock  Relays,  P/N  BR7X-300D5-26; 
and  Branson  Corporation,  P/N's  SRB-2C-24A  and  SRB-4C-24A.  Life  test  data  has  been 
supplied  by  Potter  and  Brumfield  and  Babcock  Relays.  Data  has  been  requested 
from  Branson  Corporation.  Potter  and  Brumfield  supplied  the  life  test  result 
of  34  similar  latching  type  relays.  Each  relay  was  tested  for  10^  cycles  with  0 
failures.  The  lower  limit  of  reliability  can  be  calculated  based  on  a  binomial 
distribution  by  the  following  equation: 


\ 


> 


/, 

•  +  (i,  -  4  1) 

'  I 


(3) 


Where: 


X  s  Number  of  Successes 

n  3  Number  of  Trials 

Up  3  Square  of  the  variance  at  P|  7.  confidence  with 
I  f|  and  fj  degrees  of  freedom,  where 

f,  3  2  (n-xtl),  degrees  of  freedom  for  the  numerator 

f 2  s  2  X  ,  degrees  of  freedom  for  the  denominator 

Tables  for  1/^can  be  found  In  Statistical  Tables 
and  Formula  by  A.  Hold,  pp.  47-59. 


Therefore,  using  the  numerical  data  as  applicable,  we  obtain; 
X  3  3.4  X  10^ 


n  3  3.4  X  10^ 

Up  -  2.3  where  s  2;  f2  s  6.8  x  10^ 

P,  3  907, 


Substituting  these  values  in  equation  (3)  and  solving 


R  ^ 


3.4  X  lO* _ 

3,4  X  io‘  +  I  x2,3 


0.96323 


Babcock  Relay  has  supplied  life  test  results  of  190  relays  cycled  100,000  opera¬ 
tions  each,  with  a  total  of  2  contact  misses.  For  the  use  In  equation  (3),  we 
obtain: 


X  3 

(iJ  : 

:  10^  - 

2) 

n  3 

19  X 

10^ 

11 

1.77 

where 

p,  ^ 

907, 

fg  3  2  (19  X  10^  -  2) 


2 


0.96^2 


Substituting  these  values  in  equation  (3)  and  solving 

D  >  19  X  10^-  2 

^  ~  (l9x  io‘-2)  4-  3  X  1.77 

Branson  Corporation  has  supplied  no  data  as  yet.  Therefore,  It  was  necessary 
to  calculate  the  reliability  for  the  Branson  relays  based  on  the  MIL-R-5757D 
life  of  100,000  cycles  with  no  failures.  These  relays  were  ordered  to  Mil  Spec 
5757D.  Using  these  data,  the  values  used  In  equation  (3)  are: 

X  a  10^ 

n  8  lo5 

=  2.3  where  f,  s  2;  .  2  (lO^) 

P,  -  907. 


Substituting  these  values  In  equation  (3)  and  solving 


R 


>- 


10" 

10^  +-  I  X  2,3 


0.9477 


All  relays  In  this  Subsystem  are  operated  only  once  during  the  flight.  The  relays 
used  In  the  squib  firing  circuits  carry  greater  than  rated  contact  currents.  It 
Is  assumed  that  the  ability  of  the  relays,  that  carry  excessive  contact  current, 
to  close  the  contact  set,  for  one  operation  only,  was  in  no  way  affected  by  the 
overload  on  the  contacts.  Even  If  the  contacts  were  to  weld  this  would  not  lm> 
pair  the  relays  ability  to  pass  sufficient  current  for  the  time  required  for 
successful  firing  of  the  squibs.  Therefore,  a  reliability  equal  to  that  computed 
for  one  cycle  of  operation  was  used  for  all  relays,  whether  overloaded  or  not. 

To  verify  operation  of  relays  at  excessive  contact  currents,  tests  are  scheduled 
to  be  performed.  The  results  of  these  tests  will  be  reported  In  a  subsequent 
report . 


RESISi'UitS 


The  resistors  used  In  the  Separation  and  Attitude  Control  Subsystem  are  either 
Mil  Spec  resistors  for  which  the  manufacturer  Is  unidentified  or  resistors  man¬ 
ufactured  by  Dale  Electronics,  Incorporated.  The  resistors  ordered  to  Mil  Specs 
are  used  In  the  normal  manner  and  their  failure  rates  are  taken  from  Che  Rome 
Air  Development  Center  (RADC)  Reliability  Notebook  by  using  part  ambient  temper¬ 
ature,  stress  ratJ  nd  appropriate  Mil  Spec. 

The  resistors  manufactured  by  Dale  Electronics,  Incorporated  are  used  as  current 
limiting  devices  In  the  squib  firing  circuits.  In  this  application,  they  dissi¬ 
pated  power  in  excess  of  their  rated  power  for  short  periods  of  time  (i.e.,  2  to 
5  msecs).  A  reliability  evaluation  of  these  resistors  was  performed  for  Che  CS- 
IFT  (REX-1)  vehicle  based  on  the  results  of  ten  tests.  This  resulted  In  a  cal¬ 
culated  reliability  of  O.936.  On  the  CCS-IFT  (REX-3)  vehicle,  these  resistors 
carry  approximately  one-half  the  current  they  did  on  the  CS-lFT.  No  additional 
tests  have  been  performed  to  date.  However,  tests  of  these  resistors  at  their 
application  currents  are  scheduled.  In  the  absence  of  test  results  of  the  ac¬ 
tual  application,  reliability  values  from  the  previous  tests  were  used  In  this 
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report.  The  values  are  probably  low  by  a  factor  of  4  or  greater.  The  computed 
reliability  for  the  actual  application  will  be  reported  in  a  aubaequent  report. 


CONNECTORS 


The  connectors  used  in  the  Separation  and  Attitude  Control  Subsystem  are  manu¬ 
factured  by  Bendix  Scintilla  Division,  The  Pyle-National  Company,  E.  B.  Wiggins 
Oil  Tool  Company,  Incorporated,  and  Viking  Industries,  Incorporated.  All  manu¬ 
facturers  were  contacted  and  each  supplied  qualification  test  data  to  the  appli¬ 
cable  Mil  Spec.  This  data  showed  that  each  connector  manufacturer  was  a  quali¬ 
fied  source  for  the  connectors  but  the  data  was  not  sufficient  for  computation 
of  failure  rates.  Therefore,  the  failure  rates  used  for  the  connectors  was 
taken  from  the  RAOC  Reliability  Notebook  based  on  the  number  of  active  contacts 
in  each  connector. 


T.ii.iiiiiiri't)  V 


The  transistor  used  in  the  Separation  and  Attitude  Control  Subsystem  is  manufac¬ 
tured  by  Fairchild  Semiconductor  Corporation.  This  transistor  has  an  established 
failure  rate  of  .0024%/1000  hours  when  dissipating  O.Sw  maximum  in  free  air  at 
an  ancient  temperature  of  25°C.  The  transistor  is  used  with  a  heat  sink  on  an 
aluminum  chassis  in  the  REX-3  application  and  the  power  dissipated  is  1.0725 
watts.  The  manufacturer's  rating  on  this  item  is  3  watts  maximum  at  a  case  temp¬ 
erature  of  25°C.  From  the  graphs  in  the  RADC  Reliability  Notebook,  a  ratio  of 
3.1  was  computed  for  the  increase  in  failure  rate  when  1.0725  watts  is  dissipated 
instead  of  0.8  watts  at  the  appropriate  temperature  with  the  transistor  in  a 
heat  sink.  This  factor  of  3.1  was  applied  to  the  Fairchild  established  failure 
rate  and  yielded  a  failure  rate  of  0. 00744%/1000  hours  for  this  transistor  as 
it  is  applied  in  the  circuit.  Reliability  of  the  transistor  is  computed  by  using 
equation  (1). 


TIMER 


The  timer  of  the  Separation  and  Attitude  Control  Subsystem  Is  manufactured  by 
Minneapolis  -  Honeywell.  This  timer  is  purchased  in  accordance  with  drawings 
that  specify  that  the  timer  should  have  a  "predicted  reliability  of  O.94  for  one 
cycle  based  upon  a  parts  count  analysis".  A  cycle  is  defined  as  the  period  from 
timer  start  to  last  timed  output  pulse,  in  this  case  approximately  20  seconds. 
The  parts  count  analysis  of  the  timer  as  completed  by  Minneapolis  -  Honeywell  is 
quoted  as  follows: 
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Parti  Count  Reliability  Analvl»  of  the  EXG2357B2X2  Timer 


Part  Name 

Stress  Ratio 

N 

N  xX% 

Data  Source 

Transistor,  Silicon 

1/4 

38 

0.05 

1.900 

RADC 

Silicon  Controlled 

1/2 

4 

0.08 

0.320 

RADC 

Recltfier 

Diode,  Zener,  Silicon 

5 

0.021 

0.105 

RADC 

Diode,  Blocking,  Silicon 

... 

108 

0.021 

2.268 

RADC 

Resistors,  Tin-Oxide 

1/4 

110 

0.0083 

0.913 

Minuteman  Via 

Capacitors,  MICA 

1/2 

17 

0.015 

0.255 

Corning  Glass 
RADC 

Capacitors,  Tantalum 

1/2 

1 

0.27 

0.270 

RADC 

Toroid 

— 

1 

0.06 

0.060 

RADC 

Sensitor 

1/4 

1 

0.04 

0.040 

RADC 

2  NX  6.1317, 


N  s  Number  of  Uses 

X  ■  Percent  failure  per  1,000  hours 

Assume  20  second  operating  time.  (.00556  hours) 
P  .  g - t  (2N A) 

P  •*  1  -  t  (iNX) 

„  .  .00556  X  .06  131 

P  If  1 - £555 - 

t  1  1  -  .00000034 

P  S  .99999966 


Based  on  the  above  calculations,  we  feel  confident  that  the  timer  meets  the  re¬ 
quired  reliability  cf  0.9999.  (end  of  quote) 


BATTERY 


The  battery  for  the  Separation  and  Attitude  Control  Subsystem  is  silver-zinc  re¬ 
chargeable  battery  manufactured  by  the  Eagle  c!.  i'  Company.  This  battery  is 
purchased  in  accordance  with  drawings  which  specify  the  reliability  as  "O.94 
based  on  established  data".  The  data  upon  which  this  reliability  is  based  has 
been  requested  from  the  Eagle  Ficher  Company.  To  date,  this  data  has  not  been 
received  and  follow-up  with  the  manufacturer  is  continuing.  The  reliability 
for  the  battery  used  in  the  subsystem  computation  is  the  specified  reliability 
of  0.94. 
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ROCKETS 


The  rockets  uied  In  the  Separation  and  Attitude  Control  Subsystem  are  manufactured 
by  Atlantic  Research  Corporation.  These  rockets  are  almost  Identical  to  those 
used  on  REX-1.  There  have  been  four  more  qualification  tests  with  satisfactory 
results,  but  these  are  not  significant  enough  to  change  the  previous  coisputed  re¬ 
liability.  The  reliability  was  computed  in  Appendix  H  of  PA-TR-1,  "Product 
Assurance  Technical  Report  for  the  Radar  Cross-Section  Reduction  of  Re-entry 
Vehicles"  dated  31  October  1962.  These  previous  computations  showed  the  relia¬ 
bility  of  the  squib  to  be  0.93?!  and  the  reliability  of  the  rocket  to  be  0.9952. 
These  values  of  reliability  were  used  in  this  report. 


EXPLOSIVE  NUTS 

The  explosive  nuts  used  in  the  Separation  and  Attitude  Control  Subsystem  are  man¬ 
ufactured  by  the  Hi-Shear  Corporation.  These  explosive  nuts  are  the  same  as 
those  used  on  REX-1.  There  have  been  no  additional  qualification  teats  which 
significantly  change  their  previous  computed  reliabilities.  The  previous  relia¬ 
bility  was  computed  in  Appendix  G  of  PA-TR-1  dated  31  October  1962.  This  relia¬ 
bility  was  computed  to  be  O.933  and  was  used  in  the  computations  for  this  report. 
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APPENDIX  B 


RELIABILITY  EVALUATION  SHEET 
FOR 


SEPARATION  AND  ATTITUDE  CONTROL  SUBSYSTEM 


APPENDIX  C 


MONITOR  RELIABILITY  ANALYSIS  AND  PREDICTION 


I.  OBJECTIVE 

The  objective  of  this  appendix  Is  to  provide  a  reliability  analysis 
of  the  on  board  Monitor  of  the  CCS-IFT  re-entry  vehicle  In  order  to 
determine  Its  capability  In  performing  the  required  check-out  prior 
to  lift-off. 


II.  CONCLUSION 

It  Is  concluded  from  the  results  of  this  analysis  and  evaluation  that 
the  following  numerical  reliability  prediction  for  the  Monitor  can  be 
stated: 

Monitor  r  0.9^895 


III.  DISCUSSION 

The  predicted  reliability  for  the  Monitor  Is  based  on  the  following 
general  assumptions: 

A.  That  AGE  reliability  Is  100%  reliable  and  will  cause  no 
secondary  failure  to  the  Monitor. 

B.  That  the  battery  and  components  used  In  the  Separation  and 
Attitude  Control  Subsystem  are  100%  reliable. 

C.  That  the  Monitor  operating  period  Is  1.5  hours. 

The  plan  that  was  followed  to  establish  the  stated  numerical  reliability 
prediction  Is  Identical  to  the  format  used  for  the  Separation  and  Atti¬ 
tude  Control  Subsystem. 


IV.  RELIABILITY  ANALYSIS  AND  PREDICTION 

The  Interaction  of  the  Monitor  with  the  control  subsystem  Is  shown  in 
the  Reliability  Functional  Diagram,  Figure  1.  The  separation  between 
the  Monitor  and  the  control  subsystem  Is  based  on  the  philosophy  that 
any  conqionent  essential  for  control  system  success  Is  not  Included  In 
the  Monitor  reliability  prediction. 

The  Reliability  Block  Diagram  for  the  Monitor  Is  shown  In  Figure  IC, 
and  the  Reliability  Evaluation  Sheet  Is  contained  at  the  end  of  this 
appendix. 
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APPENDIX  D 

l:x/iiples 

OF 


COMPONENT  APPLICATION  SHEETS 


Coapoacnt  Appllcatloa  Data  Sheat 
RELAYS  -  MAGNETIC 


PART  DESCRIPTION:  Geaeral  Purpoae  □  Seaaittve  Power  □ 

Othar,  Deacrlbe  Utchiag _ 

STRUCTURE:  Crystal  Caa  HH  Coaveatloaal  Armature  II 

Pluager  LJ  Telephoae  □  Reed  [_J 

Wet  Mercury  I  I  Other,  Describe  _ 

ENCLOSURE:  Open  Type  |  |  Enclosed  I  I 

Hermetically  Sealed  |  Other,  Describe 

REF.  DESIGNATION:  K1007 _  DEVICE  OR  EQUIPMENT:  RX2050 


PART  NUMBER:  RX1221 


MIL  SPEC: 


SOURCE  OF  SUPPLY:  Potter  and  Brumfield  (SLG-ll-DA) 


DESIGN  DATA 


Circuit  RequlresMnt 


Min 


28V 

32.8V 

Cont'd 

Cont'd 

1 

2 

CIRCUIT 

OPERATING 

REQUIREMENT 


Coll  Oper.  Voltage 
or  current 


Coll 

Sensltlvlt 


Voltage  or 

Current _ 

Duty  Cycle  (Time 
on  and  off 
Required  Total  No. 

of  Operations _ 

Contact 
Ratio 


Operating  Ambient 
Temperature 


Shock 


Vibration 


Acceleration 


Failure  Rate 


1000  Hrs. 


Most  Critical  Mode  of  Failure; 

Open,  Short,  Variation 
NOTES  &  SKETCHES: 


MANUF. 

DATA 


0.296A  0.357A  0.257A 


ABMA-PD-187 


GENERAL  NOTES 


JZVDC 

(maximum  coat’d) 


2PDT 

SOOohm  i  101  coll 
(a  25®C 


Resistive 


Part  Selectloa: 

Acceptable,  Marginal,  Unacceptuble 
CODsaeuks: 


Device  Packaging;  term.  Seal,  Potted, 
Spray  Coat, 

Cpen,  Other  _______ 

Requested  by _ Mall  Sta.  _  Ext._ 

Acct.  No.  Date 


App.Eng. _  Date  _ 


eliablllty  Engr.  Notes: 

Failure  Rate _ ^X/IOOU  Hrs. Sour ceP&B 

Conments:  Reliability  :  0.9^323 

Based  on  a  single  ended 
Binomial  Dlstrlbutloa  @ 
90%  Confidence. 

Reliability  Eng.  Ktahlar  Date3/6/63 
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CoapoliMt  ApplicAtlon  Dat«  Sh««t 
DIODES 


FART  DESCRIPTION: 

MOUNTING  TYPE: 

Slllcoa 

Lead 

CoBveat tonal 

di 

S 

CH 

GanDantum 

Stud 

Zener 

DDD 

Tunnel  |  I 

Other,  Describe  _ 

PART  APPLICATION; 

Switching 

□ 

Blocking 

'S 

Conputer  1  | 

Arc  Suppression 

□ 

Rectifying 

□ 

Other,  Describe  _ 

CIRCUIT 

REF.  DESIGNATION: 

CR1004 

NAME  OF  DEVICE 

OR  EQUIPMENT:  RX2050 

PART  NUMBER: 

RX1216 

SOURCE 

OF  SUPPLY: 

Pacific 

Semiconductor.  PS510B 

MILITARY  SPEC.: 

RX1217  rcCMD) 

- CIRCUIT - 

OPERATING 

REQUIREMENT 

DI 

Circui 

Nominal 

ESIGN  DAI 
Lt  Requil 
Max 

rA 

-ement 

Min 

MANUF. 

DATA 

GENERAL  NOTES 

Opar.  Junct. 

Teaveratura  C°C) 

48 

52 

43 

•40  to 
/75 

400 

OC 

/lOOO  Hrs. 

.  ZOOma  @  100°C 

Forward  Voltage  at 
Nominal  Current 

0.95V 

0.99V 

0.92  V 

Leakage  Current  at 

Norn. Reverse  Voltage 

0.018  A 

•  ••• 

0.2^  DC 
3Vrs225V 

Leakage  Current  at 

Max. Reverse  Voltage  & 
Max. Junct.  Temperature 

— 

O.&tfA 

— 

15.QqA 

DC  eVRs 
225V(aiOG 

Shunt 

Capacitance 

— 

... 

... 

1 

1 

1 

Power 

Dissipation 

89mw 

120mw 

70mw 

400bn 

Reverse 

Voltage 

28.0V 

32.8V 

25.2V 

180V 

Vibration 

2G'b  5  1 
20G's  4( 

iHBwi! 

5 

:ps 

Shock 

•  ••• 

1 

1 

1 

b500G's 
---  p. 5msec. 

Acceleration 

85G’s 

boOOOG's 
. —  Kor  Imin 

Failure  Rate 

... 

... 

|0. 00114% 
---  BOX  Conf 

Most  ^itical  Mode  c£  Failure: 

^penp Short,  Varistlon 

NOTES  &  SKETCHES: 

Device  Packaging:  Herm.  Seal,  Potted, 

Spray  Coat, 

Open.  Other 

Requested  by  Mail  Sta.  Ext. 

Acet.  No.  Date 

Part  Selection: 

Acceptable,  Marginal, 
Unacceptable 

Comments: 

App.Eng.  Date 

Reliabi 

Failure 

Source 

Comment 

Reliabi 

lity  Engr.  Notes: 

Rate.O£i//4  7./1000  Hours 

PSI 

s: 

lltv  Ens.Kiehler  DateJ/£/ 
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Componant  Application  Data  Shaat 
RESISTORS 


FART  DESCRIPTION; 

Composition  1  i 

Carbon  Film  1  1 

Other,  Describe 

PART  APPLICATION: 

Current  Limiter  1  1 
Temp.  Comp.  |  I 
Raiulator  Ballast 

Voltage  Divider  1  1 

Ballast  [T] 

Volt.  Dr'>i'  1  1 

Other,  Describe 

CIRCUIT 

REF.  DESIGNATION: 

R1014 

DEVICE: 

RX2050 

MILITARY  SPEC.  : 

MIL-R-10S09D 

PART 

NUMBER: 

RN70B3920F 

SOURCE  OF  SUPPLY: 

Radio  Specialties 

CIRCUIT 

OPERATING 

REQUIREMENT 

DESIGN  DATA 

Circuit  Requirement 

MANUF. 

DATA 

GENERAL  NOTES 

Operating 
Temperature  (°C) 

37 

... 

70 

oms 

392 

395.92 

388.08 

392  nom. 

Current 

DC  X  AC  ...  CPS. 

12.i0ma 

25.12ma 

4. 17ma 

35. 7out 
maximum 

Insul . Stress (Volts) 
DC  _X_  AC _  CPS _ 

28 

32.8 

25.2 

900 

Insulation 
Resistance  (MEGS) 

— 

— 

1 

>  10,000 

Moisture 

Resistance 

•  •• 

... 

riftyEX 

Shock 

--- 

— - 

... 

50G's 

11msec. 

Vibration 

2G's  5- 
2000CPS 

... 

Resistance 

Tolerance 

•  •• 

... 

il7. 

Temperature 

Coefficient 

N/A 

N/A 

N/A 

/0.057./'t 

Power 

Rating 

S8mw 

245mw 

7mw 

Power 

Ratio 

0.116 

0.49 

0.014 

— 

Maximum  Change 

7.  Resistance 

N/A 

287. 

N/A 

— 

Failure  Rate 

7./1000  Hours 

1 

1 

1 

1 

1 

1 

1 

• 

... 

Mo«t  Critical  Mode  of  Failure: 

^pen2)^or^(prlftp 

NOTES  &  SKETCHES: 


Part  Selectlo.i: 

Acceptable,  Marginal .Unacceptable 
Comments: 


Device  Packaging:  Herm.  Seal, 
Spray  Coat, 
Open,  Other 

Requested  by _  Mail  Sta. 

Acct.  No. _ 


Potted, 


_  Ext. 

Date  _ 


App.Eng. _  Date 

Reliability  Engr.  Notes: 
Failure  Rate  .0367,/1000  Hours 
Source  RADC 
Comments: 


?'/6/ 

Reliability  Eng.Zlchlchl 
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DISTRIBUTION  LIST 


EXTERNAL  Cople> 


BSD  (BSYDF) 

Norton  AFB,  California  2 

Aaroapace  Corporation 
Attn:  J.  Hill 

San  Bernardino,  California  5 

Lincoln  Laboratory 
Attn:  J.  Rhelnateln 

Lexington  73,  Maaaachuaette  2 

Hq.  USAF  (AFSSA>AS-1) 

Washington  25,  D.  C.  1 

Hq.  AFSC  (SCSB) 

Andrews  AFB 

Washington  25,  D.  C.  1 

Hq.  USAF  (AFRDP-S) 

Washington  25,  D.  C.  2 

Ilq,  USAF  (DCS/R&T) 

AFRDP-A 

Washington  25,  D.  C.  1 


General  Electric  Co.,  Attn:  J.  Persh 
Missile  &  Space  Division 
3198  Chestnut  Street 
Philadelphia  1,  Pa. 


Defense  Research  Corporation 
Attn:  Dr.  R.  D.  Holbrook 
4050  State  Street 

Santa  Barbara,  California  1 

ASD  (ASRMRE-3) 

Wrlght'Patterson  AFB 

Ohio  1 

Army  Signal  Msl  Support 
SIGWS-RD-MEW 
Attn:  Hr.  Shaughnessy 
White  Sands  Missile  Range 

New  Mexico  1 

SP-272 

Special  Project  Officer 
Department  of  Navy 
Washington  25,  D.  C. 
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DI8TRIBUTI0M  LIST 


EXTERNAL  (Continued) 

Copies 

BTL 

Attn:  E.  Xngrton 

C.  Boover 

Whlppany,  New  Jereey 

2 

ARPA  (Fred  A.  Eoether) 

Technlcel  Info  Office  ARF 

o 

Weehington  25,  D.  C. 

1 

Defenie  Docunentetion  Center 

Arlington  Hall  Station 

4000  Arlington  Dlvd., 

Arlington  12,  Va.  (Bldg.  B) 
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